About the role
We are looking for a Security Engineer with 5+ years of hands-on experience to own the day-to-day security of our corporate and cloud environments. This person will work closely with the Security Engineering and OSI colleagues, as well as other leaders throughout the organization to ensure that the information is properly protected through the development of appropriate protection and response programs.
Key responsibilities
• Produce and maintain security documentation: standards, runbooks, architecture diagrams, and control evidence for audits and compliance.
• Develop timelines and manage cybersecurity projects.
• Analyze the security outcomes of various technologies to effectively resolve security practices and response
• Define and deploy Microsoft Defender suite policies — Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365 —.
• Configure and maintain network security controls on Fortinet platforms (FortiGate, FortiSASE, FortiManager/FortiAnalyzer): firewall policy, IPS, application control, web filtering, VPN/ZTNA, and secure remote access.
• Define cloud security posture across AWS and Azure: IAM, network segmentation, logging and monitoring, encryption, workload protection, and secure landing zone / guardrail design.
• Create hardening baselines for Windows and Linux systems (CIS Benchmarks, Microsoft Security Baselines, GPO/Intune, SELinux/AppArmor, patch and configuration management).
• Build detection content and automation (SIEM/SOAR rules, KQL queries, scripts) to reduce manual effort and response time.
• Partner with infrastructure, DevOps, and application teams to embed security requirements into architecture and CI/CD pipelines.
• Stay current on emerging threats and translate them into concrete, actionable controls.
• Communicate and support VY Tech in a proactive and pragmatic manner after executing response actions that affect their activities.
• Generate security reports and KPIs.
• Fluent English proficiency (minimum B2, desirable C1).
• Good interpersonal communications skills (verbal & written).
• Good time management and related organizational skills.
• Work up to 80% remotely.
Required qualifications
• 5+ years of experience in security engineering or a closely related role.
• Demonstrated experience with Microsoft Defender products (Defender for Endpoint required; Identity, Cloud Apps, and Office 365 strongly preferred).
• Hands-on network security experience with Fortinet technologies, specifically FortiGate and/or FortiSASE.
• Practical cloud security experience in AWS and Azure (identity and access, network controls, logging, workload and data protection).
• Solid understanding of networking fundamentals (TCP/IP, routing, DNS, TLS, segmentation) and common attack techniques.
• Knowledge of security technologies (SIEM, WAF, NAC, MDM, etc.)
• Scripting/automation skills (PowerShell, Python, or Bash) for repetitive security tasks and integrations.
• Experience with SIEM tooling and query languages (e.g., Crowdstrike NG-SIEM / CQL).
• Strong written and verbal communication; able to explain risk to both technical and non-technical audiences.
Preferred qualifications
• Security certifications: Microsoft SC-200 / AZ-500, AWS Security Specialty, Azure Security Engineer Associate, CISSP, or GCIH.
• Experience with infrastructure-as-code for secure cloud provisioning.
• Familiarity with Zero Trust architecture and SASE/SSE deployments.
• Security regulations and standards (ISO 27001, SOC 2, NIS2, or similar).
• Endpoint and identity tooling beyond Defender (Intune, Entra ID Conditional Access, PAM solutions).